ActionTec Broadband Router MI408, User Manual

Page 1: ...nections 23 Network Home Office 24 Ethernet Connection 29 Broadband Ethernet Connection 32 WAN PPPoE WAN PPPoE 2 38 5 Configuring the Router s Security 45 General 47 Access Control 49 Port Forwarding...

Page 2: ...dministration 97 Remote Administration 98 Dynamic DNS 98 DNS Server 100 Network Objects 102 Universal Plug and Play UPnP 103 Protocols 105 8 Monitoring the Router 107 Router Status 107 Advanced Status...

Page 3: ...want to take your home or office networking to the next level the Actiontec Broadband Router is sure to be one of the keys to your success Package Contents s Actiontec Broadband Router s Black Power...

Page 4: ...ty including Fully customizable firewall with Stateful Packet Inspection Content filtering with URL keyword based filtering parental control customizable filtering policies per computer and E mail not...

Page 5: ...using HTTPS Reverse NAT Static NAT Static routing Time zone support VLAN multicast support VPN IPSec VPN passthrough only Getting to Know the Router This section contains a quick description of the Ro...

Page 6: ...hould be contacted Broadband Light The Broadband light illuminates when the Router is connected to a the Internet via Ethernet If flashing data traffic is passing across the port Internet Light When t...

Page 7: ...ports Broadband Port The Broadband port connects the Router to the ISP using an Ethernet cable Reset Button To restore the Router s factory default settings press and hold the Reset button for approx...

Page 8: ...nd off Power Port The Power port connects the Router to an electrical wall outlet via the Power cord MCaution Do not unplug the Power cord from the Router dur ing the reset process Doing so may result...

Page 9: ...lowing the setup procedure described below to verify all communication parameters are valid and the physical cable connections are correct Setting Up the Router There are three parts to setting up the...

Page 10: ...e this may take a few minutes Note If the Ethernet WAN light does not illuminate make sure the Ethernet cable is connected properly at both ends Computer Network Configuration Each network interface o...

Page 11: ...Properties window appears 5 Click the Obtain an IP address automatically radio button 6 Click the Obtain DNS server address automatically radio button Windows 98 Me 1 Select Network in the Control Pa...

Page 12: ...g su at the prompt 2 Type ifconfig to display the network devices and allocated IPs 3 Type pump i dev where dev is the network device name 4 Type ifconfig again to view the newly allocated IP address...

Page 13: ...n select the correct time zone from the Time Zone drop down list then click OK at the bottom of the screen The Router is now configured Connecting Other Computers Set Top Boxes The Router can connect...

Page 14: ...Home screen has a Main Menu that occupies the top of the screen Below that the screen is divided into three columns My Router My Network and Action Zone Main Menu The Main Menu contains links to all...

Page 15: ...quently accessed settings including Change Login User Name Password Enable Gaming and Logout My Network The My Network section of the Home screen displays the connection type name and IP address of al...

Page 16: ...14 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 17: ...some basic network settings can be configured Accessing My Network To access My Network click on My Network in the Home screen The My Network screen appears On the far right side of the screen in the...

Page 18: ...column then click Access Shared Files A list of shared files appears on the screen Website Blocking Clicking Website Blocking generates the Parental Control screen For more information about using pa...

Page 19: ...from the When should this rule occur drop down list If the rule will only be active at certain times select Specify Schedule and click Add Then add a schedule rule for more details about schedule rule...

Page 20: ...ove an access restriction from the Access Control table click the Remove button for the service The service will be removed from the Access Control table Note When Web Filtering is enabled HTTP servic...

Page 21: ...be active all the time select Always from the When should this rule occur drop down list If the rule will only be active at certain times select Specify Schedule and click Add Then add a schedule rul...

Page 22: ...vice or to test a device s connection locate the device in the My Network column then click View Device Details The Device Information screen appears 1 Click Test Connectivity The Diagnostics screen a...

Page 23: ...a new icon for the device from the New Icon drop down list Timeout for Inactive Device The amount of time a device continues to be displayed on the network after it has been disconnected is configure...

Page 24: ...22 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 25: ...of the Router s network and Internet con nections and to create new connections MCaution The settings covered in this chapter should be config ured by experienced network technicians only To access t...

Page 26: ...ays a list of the local network s properties The only modifications that can be made from this screen are disabling the connection by clicking Disable or renaming the connec tion by entering a new nam...

Page 27: ...en should this rule occur Displays when the rule is active To schedule rules see the Advanced Settings chapter Network Select the type of connection being configured from the drop down list options Br...

Page 28: ...ridge The Bridge section of the Configure Network Home Office screen is used to specify which networks can join the network bridge Note When a network is disabled its formerly underlying devices inher...

Page 29: ...assigns IP addresses to net work devices If enabled make sure to configure the network devices as DHCP Clients There are three options in this section Disabled DHCP Server and DHCP Relay Disabled Sele...

Page 30: ...r can be configured to use static or dynamic routing Dynamic rout ing automatically adjusts how packets travel on the network while static routing specifies a fixed routing path to neighboring destina...

Page 31: ...e Router using Ethernet cables either directly or via network hubs and switches Click Ethernet in the Network Connections screen if needed click Advanced at the bottom of the screen to reveal the Ethe...

Page 32: ...When should this rule occur Displays when the rule is active To schedule rules see the Advanced Settings chapter Network Select the type of connection being configured from the drop down list Network...

Page 33: ...ere additional IP addresses can be created to access the Router via the Ethernet connection 4 Ports Ethernet Switch This section displays the connection status of the Router s four Ethernet ports Clic...

Page 34: ...Connections screen to generate the Broadband Connection Ethernet Properties screen This screen displays a list of the connection s properties The only modifica tions that can be made from this screen...

Page 35: ...iontec recommends not changing the default values in this section unless familiar with net working concepts Status Displays the status of the Ethernet connection Down Connected etc Schedule Displays w...

Page 36: ...Override Subnet Mask check box and entering another subnet mask address Additionally the DHCP lease can be renewed and or released by clicking on the appropriate DHCP Lease button The Expires In valu...

Page 37: ...the Router s default IP address is 192 168 1 1 the Start IP Address must be 192 168 1 2 or higher 3 Enter the end of the IP address range used to automatically issue IP addresses in the End IP Address...

Page 38: ...the appropriate text boxes then click Apply Routing The Router can be configured to use static or dynamic routing Dynamic rout ing automatically adjusts how packets travel on the network while static...

Page 39: ...ing Routing Table Clicking New Route generates the New Route window where a new route can be configured Internet Connection Firewall Click in the Enabled check box to activate the Router s firewall on...

Page 40: ...and enables a point to point connection to be established in the normally multipoint architecture of Ethernet A discovery process in PPPoE determines the Ethernet MAC address of the remote device in...

Page 41: ...of the Configure WAN PPPoE screen displays general communica tion parameters Actiontec recommends not changing the default values in this section unless familiar with networking concepts Status Displa...

Page 42: ...ed by the ISP in this text box On Demand To use PPP on demand to initiate the point to point protocol session only when packets are actually sent over the Internet click in this check box This option...

Page 43: ...g an arbitrary challenge string per authentication attempt Support Microsoft CHAP Click in this check box if communicating with a peer that uses Microsoft CHAP authentication protocol Support Microsof...

Page 44: ...connection to automatically obtain a DNS server address select Obtain DNS Server Address Automatically from the DNS Server drop down list To manually configure DNS server addresses select Use the Foll...

Page 45: ...sidering parameters such as band width delay and more Default Route Click in this check box to define the connection as a the default route Multicast IGMP Proxy Default Click in this check box to enab...

Page 46: ...44 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 47: ...y The firewall provides both the security and flexibility home and office users seek It provides a managed professional level of network security while enabling the safe use of interactive application...

Page 48: ...traffic arriving at the Router which does not belong to a known session Port Triggering define port triggering entries to dynamically open the firewall for some protocols or ports Remote Administratio...

Page 49: ...service the firewall receives whether originating in the Internet or from a computer in the local net work is checked against the firewall rules to determine whether the request should be allowed to...

Page 50: ...n the Port Forwarding DMZ host and Remote Access screens Unrestricted All services are permitted except as configured in the Access Control screen Minimum Security Unrestricted Permits full access fro...

Page 51: ...even the whole network from accessing certain services on the Internet For example one computer can be prohibited from surfing the Internet another computer from transferring files using FTP and the w...

Page 52: ...de of any Security screen The Access Control screen appears Note The Allowed section is only visible when the firewall is set to Maximum 2 Click Add The Add Access Control Rule screen appears Note To...

Page 53: ...ly to save the changes The Access Control screen will display a sum mary of the new access control rule Note To block a service not included in the list select Specify Protocol from the Protocol drop...

Page 54: ...n the network Port forwarding sometimes referred to as local servers supports both of these functions To grant Internet users access to servers inside the local network each service pro vided as well...

Page 55: ...ame simultaneously Well the answer may be a bit confusing All the computers on the network can behave as clients and use a specific service simultaneously Being a client means the com puter within the...

Page 56: ...outbound traffic The outbound traf fic triggers which ports inbound traffic is directed For example a gaming server is accessed using UDP protocol on port 2222 The gaming server responds by connectin...

Page 57: ...from the drop down list next to Add 3 Click Add An Edit Service screen appears 4 Specify the port triggering entries by clicking New Trigger Ports and New Opened Ports and entering the protocol and p...

Page 58: ...ng remote adminstration To access select Remote Administration from the left side of any Security screen The Remote Administration screen appears Telnet Telnet is used to create a command line session...

Page 59: ...e Router from the local network Therefore remote adminstration access to Telnet or MegaControl Panel services should be activated only when absolutely necessary Diagnostic Tools Diagnostic Tools are u...

Page 60: ...d Static NAT screen appears 3 Enter the name of the computer to be used as the local host or to enter a specific IP address select Specify Address from the Networked Computer Device drop down list and...

Page 61: ...made between rules that apply to Internet and local network devices To access select Advanced Filtering from any Security screen The Advanced Filtering screen appears Two sets of rules can be configur...

Page 62: ...tration rules from the remote administration tab DMZ host rules from the DMZ tab Final rules Outbound Packets Output Rules Sets Initial rules All rules defined for the network device on which the pack...

Page 63: ...on traffic Port matching will be defined when selecting protocols For example if the FTP protocol is selected port 21 will be checked for matching traffic flow between the defined source and destinati...

Page 64: ...asting Logging Click in this check box to add entries relating to this rule to the security log Scheduler When should this rule occur If advanced filtering needs to be active all the time select Alway...

Page 65: ...acket or the event such as protocol IP addresses ports etc The following are the available event types that can be recorded in the security log Firewall internal from the firewall internal mechanism i...

Page 66: ...s been accepted Default policy a packet has been accepted blocked according to the default policy Remote administration a packet designated for the Router management has been accepted blocked Access c...

Page 67: ...d service a packet has been accepted because it belongs to a permitted service in the maximum security level SynCookies Protection a SynCookies packet has been blocked ICMP Flood Protection a packet h...

Page 68: ...garding connection Wildcard connection hooked debug message regarding connection Connection closed debug message regarding connection Echo Chargen Quote Snork protection a packet has been blocked due...

Page 69: ...ttings To view or change the security log settings 1 Click Settings in the Security Log screen The Security Log Settings screen appears 2 Select the type of activities that will generate a log message...

Page 70: ...f All Blocked Connection Attempts is un checked select specific blocked events from this list to generate log messages 4 Click in the Remote Administration Attempts check box to write a log mes sage f...

Page 71: ...and categorizing online content it is possible to create numerous Internet access policies and easily apply them to networked computers Activating Parental Controls To create a basic access policy for...

Page 72: ...ox below For example enter www sample com 3c Additionally the Router can block or allow access to websites based on key words For example to block any website with example in its title click in the ci...

Page 73: ...s selected see Scheduler Rules in the Advanced Settings chapter for more infomation 6 An overview of the rule or access policy is displayed at the bottom of the screen Advanced Parental Controls Click...

Page 74: ...orced from the Network Computer Device drop down menu If Specify Schedule is selected see Scheduler Rules in the Advanced Settings chapter for more infomation 3 When finished click Apply to have the a...

Page 75: ...ch generates the Advanced screen The following settings are explained in this chapter Firmware Upgrade download and install new versions of the Router s firmware Firmware Restore restores firmware to...

Page 76: ...Dynamic DNS settings DNS Server manage the local LAN network for host name and IP address Network Objects create and manage network objects discrete LAN subsets Universal Plug and Play configure Univ...

Page 77: ...ing from a local computer use a software image file pre down loaded to the computer s disk drive or located on the accompanying evalua tion CD Upgrading from the Internet use this method to upgrade th...

Page 78: ...Router s firmware can be automatically updated via the Internet From the drop down list next to the globe icon near the top of the Firmware Upgrade screen a list of options appears as described below...

Page 79: ...ade process will begin and should take no longer than one minute to complete At the conclusion of the upgrade process the Router automatically reboots The new firmware runs maintaining any custom conf...

Page 80: ...ich are used to backup and restore the Router s current configuration To do this 1 Click Configuration File in the Advanced screen The Configuration File screen appears 2 Click Load Configuration File...

Page 81: ...9 Chapter 7 Using Advanced Settings System Settings Clicking System Settings in the Advanced screen generates the System Settings screen where various system and management parameters can be configure...

Page 82: ...itoring Web Pages Click in this check box to activate the automatic refresh of system monitoring web pages Warn User Before Network Configuration Changes Click in this check box to activate user warni...

Page 83: ...box to activate system logging Low Capacity Notification Enabled Click in this check box to activate low capacity notification works in tandem with Allowed Capacity Before Email Notification and Syste...

Page 84: ...rity log buffer capacity reached to trigger an E mail notification Security Log Buffer Size Enter the size of the security log buffer in this text box Remote System Notify Level This feature is used t...

Page 85: ...ch for a WAN connection Enable Logging Clicking in this check box activates automatic WAN detection PPP Timeout Enter the amount of time in seconds before the Router stops attempting to establish a br...

Page 86: ...zone from the drop down list The Router can automati cally detect daylight saving setting for selected time zones If the daylight sav ing settings for a time zone are not automatically detected the fo...

Page 87: ...e server addresses by clicking Add on the bottom of the Automatic Time Update section and entering the IP address or domain name of the time server in the Time Server Settings screen Scheduler Rules S...

Page 88: ...in the Rule Name text box 5 Specify if the rule will be active or inactive during the designated time period by clicking the appropriate Rule Settings radio button 6 Click Add Rule Schedule The Edit...

Page 89: ...e in the appropriate text boxes 9 Click Apply Note Make sure the Router s date and time settings are properly configured for the time zone Routing Access the routing table rules by clicking Routing in...

Page 90: ...e occurs in the network A multicast is simply a message that is sent simultaneously to a pre defined group of recipients When joining a multicast group all messages addressed to the group will be rece...

Page 91: ...the lease The host can choose to renew an expiring lease or let it expire If it chooses to renew a lease it will also receive current information about network services as it did with the original lea...

Page 92: ...in the Advanced screen The IP Address Distribution screen appears Editing DHCP Server Settings To edit the DHCP server settings for a device 1 Click the appropriate icon in the Action column The DHCP...

Page 93: ...igned an IP address by the DHCP server for a limited time Lease Time when it connects to the network When the lease expires the server will determine if the computer has disconnected from the network...

Page 94: ...assign to the computer 4 Enter the MAC address of the computer s network card 5 Click the Apply to save changes Note A device s fixed IP address is actually assigned to the spe cific network card s M...

Page 95: ...s the number of packets transmitted and received round trip time and success status To diagnose network connectivity 1 Click Diagnostics from the Advanced screen The Diagnostics screen appears 2 Enter...

Page 96: ...information 2 Click Restore Defaults The Router will restart and factory default settings will be applied Note All of the Router s settings and parameters will be restored to their default values aft...

Page 97: ...isting computer to the Router To do this 1 Click MAC Cloning in the Advanced screen The MAC Cloning screen appears 2 Enter the MAC address to be cloned in the To Physical Address text boxes 3 Click Cl...

Page 98: ...Settings screen When adding a user specify the following parameters Full Name The user s full name User Name The name a remote user will use to access the home or office network This entry is case se...

Page 99: ...ss in the Notification Address text box 3 Select the System and Security notification levels in the System Notify Level and Security Notify Level drop down lists Note Changing any of the user paramete...

Page 100: ...f available IP addresses while maintaining a constant domain name This allows to user to access a device a camera for example from a remote loca tion since the device will always have the same IP addr...

Page 101: ...ic DNS service Options include Broadband Connection Ethernet Broadband Connection Coax and WAN PPPoE Offline Disable the Dynamic DNS feature by clicking this check box This feature is available only t...

Page 102: ...The Router s DNS server is an auto learning DNS which means that when a new computer is connected to the network the DNS server learns its name and automatically adds it to the DNS table Other networ...

Page 103: ...ers stored in the DNS table click DNS Server in the Advanced screen The DNS Server screen appears To add a new entry to the list 1 Click Add DNS Entry in the DNS Server screen The DNS Entry screen app...

Page 104: ...iguring system rules can be applied to all the devices defined as part of the network object at once For example instead of setting the same website filtering configuration to five com puters one at a...

Page 105: ...rk object type from the Network Object Type list box Options include IP address IP Subnet IP Range MAC Address and Host Name 6 Repeat to create other network objects if needed When finished click Appl...

Page 106: ...efined rule depends on it Since there is a maximum limitation on the number of UPnP defined services 256 enable the cleanup feature if the limit is in danger of being exceeded 4 Select whether all WAN...

Page 107: ...s can be used in various security features such as Access Control and Port Forwarding New protocols can be added to support new applications or existing ones can be edited when needed To define a prot...

Page 108: ...vice Description text box then click Add Service Ports The Edit Service Server Ports screen appears 4 Select a protocol from the Protocol drop down list To create a new protocol select Other After sel...

Page 109: ...ay important system information including Basic Router settings System log Key network device parameters Network traffic statistics Router Status Click System Monitoring at the top of the Home screen...

Page 110: ...three other monitoring options System Logging Full Status System wide Monitoring of Connections and Traffic Monitoring System Logging Click System Logging in the Advanced Status screen to generate the...

Page 111: ...wide Monitoring of Connections in the Advanced Status screen to generate the Full Status System wide Monitoring of Connections screen which features a table summarizing the monitored con nection data...

Page 112: ...between the local network and the Internet To view up to the second statistical information about data received from and transmitted to the Internet and about data received from and transmitted to co...

Page 113: ...r restore the default settings to the Router LAN Firewall If the firewall setting for the local network is set to maximum no computers from the network will be able to connect to the Router To gain ac...

Page 114: ...properly Verify the Router s settings are the same as the computer I ve run out of Ethernet ports on my Router How do I add more computers Plugging in an Ethernet hub or switch expands the number of...

Page 115: ...o refresh the IP address Windows 95 98 98SE and Me Select Start Run type winipcfg and press Enter Ensure the Ethernet adapter is selected in the device box Press the Release_all button then press the...

Page 116: ...the Router The default user name for the router is admin and the default password is password all lower case no quotation marks When logging into the Router the first time or after restoring the Rout...

Page 117: ...s is achieved by shaping the traffic and process ing higher priority traffic before lower priority traffic I STOP Do not change any Quality of Service settings unless instructed to do so by the ISP Tr...

Page 118: ...param eters both inbound and outbound Connection based QoS also allows inheriting QoS parameters by some of the applications that open subsequent connections For instance QoS rules can be defined on...

Page 119: ...ority screen appears This screen is divided into two identical sections one for QoS input rules and the other for QoS output rules which are for prioritizing the inbound and outbound traffic respectiv...

Page 120: ...tings chapter to learn how to add a network object Clicking Add is the same as clicking New Entry in the Network Objects screen Destination Address The destination address of the packets sent to or re...

Page 121: ...e may be active Traffic Shaping Traffic Shaping is the solution for managing and avoiding congestion where the network meets limited broadband bandwidth Typical networks use a 100 Mbps Ethernet LAN wi...

Page 122: ...then click Traffic Shaping The following screen appears 2 Click Add The Add Device Traffic Shaping screen appears 3 Select the device for which the traffic will be shaped The drop down list includes a...

Page 123: ...time to be transmitted will be fragmented to smaller sections This avoids transmission of large bursty packets that can cause delay or jitter for real time traffic such as VoIP Shaping Classes The ban...

Page 124: ...n be granted one of eight priority levels zero being the highest and seven the lowest opposite the rules priority levels This level sets the priority of a class in comparison to other classes on the d...

Page 125: ...ts in this way slows a source down enough to keep the queue steady and reduces the number of packets lost when a queue overflows and a host is transmitting at a high rate Schedule By default the class...

Page 126: ...he Network Objects screen Destination Address The destination address of the packets sent to or received from the network object This address can be configured in the same manner as the source address...

Page 127: ...irst rule is match packets with any source address any destination address and any protocol to this class all packets traveling through Router will be associated with the specific class Any rules defi...

Page 128: ...best effort Internet services by differentiating traffic by users service requirements and other criteria Packets are specifically marked allowing network nodes to provide different levels of service...

Page 129: ...ntry click Add In either case the Edit DSCP Settings screen appears 3 Configure the following parameters DSCP Value hex Enter the DSCP value as a hexadecimal value 802 1p Priority Select a 802 1p prio...

Page 130: ...eo and voice Data classes four through one range from controlled load applications down to loss eligible traffic Zero is the value for unassigned traffic and used as a best effort default invoked auto...

Page 131: ...ets sent dropped or delayed are just a few of the parameters monitored per each shaping class To view class statistics click Quality of Service at the top of the Home screen then click Class Statistic...

Page 132: ...130 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 133: ...nd Router Standards IEEE 802 3x IEEE 802 3u IP IP version 4 Firewall ICSA certified Speed LAN Ethernet 10 100 Mbps auto sensing Cabling Type Ethernet 10BaseT UTP STP Category 3 or 5 Ethernet100BaseTX...

Page 134: ...C 3A Certifications FCC Part 15 UL 60959 1 Operating Temperature 0 C to 40 C 32 F to 104 F Storage Temperature 20 C to 70 C 4 F to 158 F Operating Humidity 8 to 93 non condensing Storage Humidity 5 to...

Page 135: ...by turning the equipment off and on the user is encouraged to try to correct the interference by implementing one or more of the following measures s Reorient or relocate the receiving antenna s Incr...

Page 136: ...ire ments the antenna used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co located or operating in conjunction with any ot...

Page 137: ...ronics warrants the media con taining software against failure during the warranty period The only updates that will be provided are at the sole discretion of Actiontec Electronics and will only be av...

Page 138: ...ed or replaced item will be shipped to Customer at Actiontec Electronics expense not later than thirty 30 days after Actiontec Electronics receives the defective product Return the product to In the U...

Page 139: ...VISED OF THE POSSIBILITY OF SUCH DAMAGES AND LIMITS ITS LIABILITY TO REPAIR REPLACEMENT OR REFUND OF THE PURCHASE PRICE PAID AT ACTIONTEC ELECTRONICS OPTION THIS DISCLAIMER OF LIABILITY FOR DAMAGES WI...

Page 140: ...l Governing Law This Limited Warranty shall be governed by the laws of the State of California U S A excluding its conflicts of laws and principles and excluding the United Nations Convention on Contr...